Solved

copy url from application pages

Posted on 2004-10-08
5
116 Views
Last Modified: 2013-12-24
I have an application that people need to log into.  If you log in and then go to the address bar - you copy the url - close the browser (this ends the session) Open IE and then paste the copied url into the address bar - you get right into the application - no login screen!  Anyone know why the application.cfm is not controlling this?
Thanks!
0
Comment
Question by:ahillman
5 Comments
 
LVL 5

Expert Comment

by:smaglio81
Comment Utility
I am not sure. These types of things sometimes have a variety of causes. I think it might help narrow down the possibilities if we had a better idead of what was going on in Application.cfm. What kind of verification algorithm are you using. Did you write your own session management code, or are you using <cflogin>/<cflogout>?

Steven
0
 
LVL 6

Expert Comment

by:reitzen
Comment Utility
We store the session info in the client scope and the session scope and compare each call via the application.cfm.  If the two values don't match, we assume the user has closed their browser and need to login again.

application.cfm
<cfif Client.browserSession NEQ session.SessionID>
  <cflocation url="login.cfm">
</cfif>

Once the user has been authenticated in the login.cfm
<cfif IsDefined("cookie.jsessionid")>
  <cfset Client.browserSession = cookie.jsessionid>
</cfif>

HTH
0
 
LVL 17

Expert Comment

by:Tacobell777
Comment Utility
yes, because the user did not log out, i.e. the variables still exist
closing the browser does not end the session, the session variables still exist in memory on the server - users accesses the application again and the cookie still exists on the users machine, so its just like they never been gone.

You can set cookies to expire when the browser closes, and when they access the application again it should not let them in, however the session variables still exists in memory on the server if they have not explicitly been destroyed (ofcourse they will time out after the period defined in the application tag)..
0
 
LVL 17

Accepted Solution

by:
Tacobell777 earned 125 total points
Comment Utility
0
 

Author Comment

by:ahillman
Comment Utility
Makes lots of sense - I was under the impression that the session is killed when the browser is closed - wrong assumption obviously.  So - lets say i decided to bookmark or save a url that would take me directly into the application at a later date.  This wouldn't work after the session has ended on my server correct?  Good to know.  If I wanted to have the session end when the browser is closed and have the cookie go away at the same time - what would be the proper coding? This isn't a security risk for this particular application but could be for another one that is in the works.
Thanks!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Have you ever sent email via ColdFusion and thought of tracking this mail to capture the exact date and time when the message was opened ?  If yes, then this article is for you ! First we need a table user_email with columns user_id , email , sub…
One of the typical problems I have experienced is when you have to move a web server from one hosting site to another. You normally prepare all on the new host, transfer the site, change DNS and cross your fingers hoping all will be ok on new server…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now